$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft File: fRSfYkR4U2icEvsoiv62toHP68E.mft (raw, json) Hash identifier: PVb0COqv6n0Ap1xttYrNWojttonz0mWNXjQleiEanlE= Subject key identifier: 6B:2E:95:59:A1:22:18:29:BB:1C:6E:D8:F3:4F:7B:0C:C0:E8:28:79 Authority key identifier: 7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 Certificate issuer: /CN=7d149f62447853689c12fb288afeb6b681cfebc1 Certificate serial: 0196BD4933B98487BC31F47A3ECDFB374BA8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft Manifest number: 14D2 Signing time: Sun 11 May 2025 03:00:13 +0000 Manifest this update: Sun 11 May 2025 03:00:13 +0000 Manifest next update: Mon 12 May 2025 03:00:13 +0000 Files and hashes: 1: 2CeWoGzDWl6UkY36SIUH1OhgWjI.roa (hash: SpuPtcO5oh6qYeICaLjHEnb1AyuNec5O8bsGPbWlXR0=) 2: 2OyaFSjBRoREDHEMRffL3EbO-HE.roa (hash: nXI4OkiYa5c+MjdVzqLFFZ3ZGswBHizjRFddCRvE7B8=) 3: 3wwIi79zg2SGivGdrN-g0LB5ULQ.roa (hash: RzCIbHY1nS76gIylPt0Y25UbcEOAlA6M3aFOCeIxSG4=) 4: 7gAx1Pyx4u0TcyoGJm-7xTCnp00.roa (hash: gAGdIZGspYyJlvskZ74rsTfXVPxswIlGbLI3PkYprvU=) 5: EUICRwNR8sR91Lfm3GIv3mdVr9k.roa (hash: ua1xjRnUek2cLwApq/HW3bjCZKfJsqGGvp16wgKp8P0=) 6: HYkelKhWY7NiPV2rIoXC5vMsggM.roa (hash: 8m611pZGVk4ujPG9J04iZxFPYTUOzYbyGd2fDqvqZP4=) 7: Jhq91rxsv2WDUPAoN1fbsyaCM6g.roa (hash: nybfHNUP7zn/KmMoeiwkEEs96tiChMxH1OSoiBocUXI=) 8: Melq7PLQcz-P184ktmpNOP2H3e4.roa (hash: bGaw09MG/JnAsEfDppYWkhFJuztc0B+a9Nz0AQOqrUY=) 9: Q4BLVnTtEyoC8eHyhkcteKoeJ6A.roa (hash: edQEuSj12spKEsnnwc1oyC8FT8MhVl13a4ooOoJq0ys=) 10: RWf3DVveZH4QLyKGQca82kY-7Qw.roa (hash: V22GqObY+hDoy85YYLCgPS5lAieuM7VmlAbZz3/L7ZM=) 11: fRSfYkR4U2icEvsoiv62toHP68E.crl (hash: LrrM7sFTBOBrpq/7zJxRiZvv95y9AjFQRcsNQ1wg1/0=) 12: jbUG9pTk9em_fTHbjoEIhua3pK0.roa (hash: 4tGn3tkK46T9dFOLGdw2zw9ukjnxUtA/PXFwlS5np88=) 13: l63ezx_M0iAM5dKGQZtcWd8xPmQ.roa (hash: qf8bDHKpJxynQt1q7hXqJrXbCZfUxZZ7MBpbrfJkMcU=) 14: lkgJ8Vsd8ocb4eicMkQ6N3ZL26E.roa (hash: 9Yz4K7Z8z/hwTeoXB4iHYgi23xVHLoum6nVhNj0Tjmc=) 15: o1JVWuEuZPta2YEvpJ2jdJYR8K8.roa (hash: qNV/P5sCJuhJ/7lvmy6L/P1vDN6QSvQRrwuS+5DqKkg=) 16: txxKQQE40wffgCtcTH6E5WrYYhY.roa (hash: td5UTouO1Nf7RuKTOrzSb6h5NfM7Vvfby16oyueCQko=) 17: zBonQZgEPDvj1nGNR_bu7NzMU0U.roa (hash: s94OjMSrqoWnsXwDlW8kAk2CQ0Z0teuNflnJXhN+I6g=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 12 May 2025 03:00:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:96:bd:49:33:b9:84:87:bc:31:f4:7a:3e:cd:fb:37:4b:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7d149f62447853689c12fb288afeb6b681cfebc1 Validity Not Before: May 11 03:00:13 2025 GMT Not After : May 12 03:00:13 2025 GMT Subject: CN=6b2e9559a1221829bb1c6ed8f34f7b0cc0e82879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:72:41:a3:3e:72:34:8b:20:26:da:e3:b8:0a: 7d:58:b4:99:19:44:10:ca:6f:a3:7a:10:d5:ad:45: 59:ee:a4:85:2b:13:05:e2:0b:be:84:9e:05:59:74: 48:4a:ed:5b:0e:b9:f6:d7:ee:e5:7a:70:c4:dc:c6: 90:3a:b1:b7:b7:ab:b8:44:9c:df:76:59:8d:fa:e6: 9d:18:06:40:a0:6a:93:fd:f6:c3:0a:24:33:6c:18: 51:7d:07:fd:0e:1c:5b:e9:ba:15:b7:91:a4:1d:f8: 7e:be:30:c2:11:c6:3e:dd:80:0d:5c:9d:e4:43:5b: 81:40:a8:e1:15:eb:ba:fa:13:ba:e3:05:af:3c:c5: 2e:80:b2:c3:e5:e8:c5:5b:35:2a:62:1c:b3:a0:ee: 6a:a4:13:b9:62:56:0d:2c:87:01:50:70:c7:2e:34: eb:b6:96:13:d6:dc:75:c2:96:62:00:82:93:43:97: ec:74:5b:e4:7c:27:a3:44:8d:16:c9:7e:10:ca:5d: fc:81:68:db:c4:78:8f:28:bf:13:0b:fc:c8:a2:f6: e0:b8:53:d4:02:a5:ba:c2:a1:b9:87:47:fe:64:82: 30:6a:af:48:3c:d3:5c:33:84:ef:59:25:72:09:b5: 7d:09:5b:b1:d6:d3:1f:c2:2d:15:6b:5c:b5:21:76: e6:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:2E:95:59:A1:22:18:29:BB:1C:6E:D8:F3:4F:7B:0C:C0:E8:28:79 X509v3 Authority Key Identifier: keyid:7D:14:9F:62:44:78:53:68:9C:12:FB:28:8A:FE:B6:B6:81:CF:EB:C1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fRSfYkR4U2icEvsoiv62toHP68E.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/6a54bf-f00f-467a-bf57-aab0e414cc63/1/fRSfYkR4U2icEvsoiv62toHP68E.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5a:aa:88:d7:9d:8e:64:7f:02:ec:97:7a:13:a1:bb:c3:ee: 37:97:51:e6:5c:fd:7e:ac:f9:26:63:74:43:2e:26:74:96:26: 67:bf:30:14:e8:04:26:b4:e4:52:bd:49:22:de:ea:dd:23:94: 96:14:22:02:ed:18:da:2d:fb:67:56:d9:9e:2a:89:cd:4c:c4: 57:8c:0a:1f:bd:a1:8c:0e:ce:8d:a5:30:0e:06:ab:bf:72:dc: ba:ff:1f:a5:11:ed:71:7f:b2:fd:8e:bb:15:dd:48:55:62:82: 0a:62:2e:81:47:c2:75:d6:a0:9e:6f:f8:7d:6c:c8:ff:f4:11: 6f:20:c9:b0:ca:6f:e4:1d:b4:8c:02:ae:13:47:a3:93:e2:39: 39:76:0c:fe:b4:f8:09:cb:50:6e:25:3b:df:4a:36:74:a8:89: 21:00:49:29:70:b1:d7:44:36:46:d0:64:06:2c:01:a6:26:14: 62:ac:85:d6:0c:2d:b4:b0:18:47:f4:c8:08:6a:64:55:fb:2a: 25:00:71:5a:52:9d:d4:7c:01:c5:3d:04:07:8c:d8:1d:fb:e3: 9a:92:61:03:75:68:96:a3:aa:5b:35:3b:72:81:ac:22:b1:e9: fa:a0:37:da:3f:ae:54:42:0c:18:98:39:45:c8:8c:9a:d4:f0: 5c:46:da:fe -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZa9STO5hIe8MfR6Ps37N0uoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdkMTQ5ZjYyNDQ3ODUzNjg5YzEyZmIyODhhZmViNmI2ODFj ZmViYzEwHhcNMjUwNTExMDMwMDEzWhcNMjUwNTEyMDMwMDEzWjAzMTEwLwYDVQQD Eyg2YjJlOTU1OWExMjIxODI5YmIxYzZlZDhmMzRmN2IwY2MwZTgyODc5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9XJBoz5yNIsgJtrjuAp9WLSZGUQQ ym+jehDVrUVZ7qSFKxMF4gu+hJ4FWXRISu1bDrn21+7lenDE3MaQOrG3t6u4RJzf dlmN+uadGAZAoGqT/fbDCiQzbBhRfQf9Dhxb6boVt5GkHfh+vjDCEcY+3YANXJ3k Q1uBQKjhFeu6+hO64wWvPMUugLLD5ejFWzUqYhyzoO5qpBO5YlYNLIcBUHDHLjTr tpYT1tx1wpZiAIKTQ5fsdFvkfCejRI0WyX4Qyl38gWjbxHiPKL8TC/zIovbguFPU AqW6wqG5h0f+ZIIwaq9IPNNcM4TvWSVyCbV9CVux1tMfwi0Va1y1IXbmIwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGsulVmhIhgpuxxu2PNPewzA6Ch5MB8GA1UdIwQY MBaAFH0Un2JEeFNonBL7KIr+traBz+vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTct YWFiMGU0MTRjYzYzLzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83ZC82YTU0YmYtZjAwZi00NjdhLWJmNTctYWFiMGU0MTRjYzYz LzEvZlJTZllrUjRVMmljRXZzb2l2NjJ0b0hQNjhFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAglqqiNed jmR/AuyXehOhu8PuN5dR5lz9fqz5JmN0Qy4mdJYmZ78wFOgEJrTkUr1JIt7q3SOU lhQiAu0Y2i37Z1bZniqJzUzEV4wKH72hjA7OjaUwDgarv3Lcuv8fpRHtcX+y/Y67 Fd1IVWKCCmIugUfCddagnm/4fWzI//QRbyDJsMpv5B20jAKuE0ejk+I5OXYM/rT4 CctQbiU730o2dKiJIQBJKXCx10Q2RtBkBiwBpiYUYqyF1gwttLAYR/TICGpkVfsq JQBxWlKd1HwBxT0EB4zYHfvjmpJhA3VolqOqWzU7coGsIrHp+qA32j+uVEIMGJg5 RciMmtTwXEba/g== -----END CERTIFICATE-----Generated at Sun May 11 10:10:06 2025 by rpki-client